From 7041713650de8dffea6208fe10f10ed32449a8be Mon Sep 17 00:00:00 2001
From: JackDandy <jackdandy@users.noreply.github.com>
Date: Tue, 3 Apr 2018 00:05:13 +0100
Subject: [PATCH] Change pick up the stragglers late to the more security
 party.

---
 CHANGES.md                          | 1 +
 gui/slick/js/configNotifications.js | 1 +
 gui/slick/js/confirmations.js       | 1 +
 sickbeard/providers/__init__.py     | 2 +-
 4 files changed, 4 insertions(+), 1 deletion(-)

diff --git a/CHANGES.md b/CHANGES.md
index 425ff28f..f6f71b5a 100644
--- a/CHANGES.md
+++ b/CHANGES.md
@@ -30,6 +30,7 @@
 * Update xmltodict library 0.10.2 (375d3a6) to 0.11.0 (79ac9a4)
 
 [develop changelog]
+* Change pick up the stragglers late to the more security party
 
 
 ### 0.15.3 (2018-03-28 16:55:00 UTC)
diff --git a/gui/slick/js/configNotifications.js b/gui/slick/js/configNotifications.js
index 50e08813..9795fa7f 100644
--- a/gui/slick/js/configNotifications.js
+++ b/gui/slick/js/configNotifications.js
@@ -827,6 +827,7 @@ $(document).ready(function(){
 				return
 			}
 			$.post(sbRoot + '/home/save_show_email', {
+				_xsrf: Cookies.get('_xsrf'),
 				show: show,
 				emails: $('#show-email-list').val()},
 				function (data){
diff --git a/gui/slick/js/confirmations.js b/gui/slick/js/confirmations.js
index 75744599..9b99ff83 100644
--- a/gui/slick/js/confirmations.js
+++ b/gui/slick/js/confirmations.js
@@ -130,6 +130,7 @@ $(document).ready(function () {
 						$.SickGear.history.lastDeleteRecords = deleteRecords ? checked : '';
 						$.post($.SickGear.Root + '/history/watched',
 							{
+								_xsrf: Cookies.get('_xsrf'),
 								tvew_id: delArr.join('|'),
 								files: (deleteFiles ? '1' : ''),
 								records: (deleteRecords ? '1' : '')
diff --git a/sickbeard/providers/__init__.py b/sickbeard/providers/__init__.py
index d5ec1a06..e385eb85 100755
--- a/sickbeard/providers/__init__.py
+++ b/sickbeard/providers/__init__.py
@@ -250,7 +250,7 @@ def makeTorrentRssProvider(configString):
 
 
 def getDefaultNewznabProviders():
-    return '!!!'.join(['Sick Beard Index|http://lolo.sickbeard.com/|0|5030,5040|0|eponly|0|0|0',
+    return '!!!'.join(['Sick Beard Index|https://lolo.sickbeard.com/|0|5030,5040|0|eponly|0|0|0',
                        'NZBgeek|https://api.nzbgeek.info/||5030,5040|0|eponly|0|0|0',
                        'NZBs.org|https://nzbs.org/||5030,5040|0|eponly|0|0|0',
                        'DrunkenSlug|https://api.drunkenslug.com/||5030,5040|0|eponly|0|0|0',